Createl Privacy Policy
Effective date: July 16, 2026
Last updated: July 16, 2026
1. Who we are
Createl (referred to as “we”, “us”, or the “Service”) is a mobile app that connects content creators with travel brands for barter collaborations. The app is available on iOS and Android.
- Developer: Krasii Oleh
- Country: Ukraine
- Privacy contact: privacy@createl.app
- Support contact: support@createl.app
At this stage, Createl is developed and administered by an individual (the developer), without a separately registered legal entity. In a future version of the app, with the introduction of paid subscriptions/collaborations, a legal entity will be registered, and this Policy will be updated with the corresponding details.
2. What data we collect
2.1 Data provided directly by the user
For all users:
- Name, email, password (hashed)
- Profile photo
- Selected role (influencer / brand)
For creator profiles:
- @username, bio, country of residence, languages spoken
- Social media data (Instagram, TikTok, YouTube, Twitter): handle, follower count, engagement rate (entered manually)
- Content categories
- Trip plans: city, dates from/to, purpose of trip
For brand profiles:
- Business name, type, description, address, website
- Photo gallery
- Collaboration terms (what the brand offers/expects)
2.2 Data generated through use of the service
- Collaboration history, deal statuses, chat messages
- Ratings and reviews
- Push notification tokens (for notifications)
- Technical data: device type, OS version
2.3 Device permissions
The app may request the following device permissions:
| Permission | Purpose | Required? |
|---|---|---|
| Camera | Taking profile photos and portfolio content | No — an existing photo can be uploaded from the gallery instead |
| Photo library | Selecting a profile photo, brand photo gallery, portfolio content | No — camera is an alternative |
| Push notifications | Notifications about new collaboration offers, chat messages, and matches | No — can be disabled in device settings at any time; core app functionality remains available |
| Location (GPS) | One-time detection of the user’s current city to pre-fill a form (e.g., a trip or profile) — only when explicitly triggered by the user, never in the background | No — the city can always be entered manually without granting this permission |
Minimizing the use of location data:
- We do not track location in the background
- Location is requested only when the user explicitly initiates an action (e.g., taps “detect my city”)
- Precise coordinates (latitude/longitude) are not stored on our servers — only the resulting city name is used
- Location permission can be revoked at any time in device settings without limiting access to core app features
- We do not share location data with third parties
2.4 Payment data
At this stage, Createl does not process any payments. All collaborations in the app are barter-only (exchange of content for services/stays); no financial transactions between users take place through the app. If paid collaborations or subscriptions are introduced in the future, this section will be updated to describe the payment provider and the handling of payment data.
2.5 Data from third parties
Not currently applicable — there is no integration with the Instagram/TikTok API. All social media data is entered manually by the user. This will become relevant in a future version, when social account connection via OAuth is introduced — this section will be updated accordingly.
3. How we use the data
- Creating and maintaining a user account
- Automatically matching brands/influencers based on criteria (trip city, audience requirements)
- Sending push notifications about relevant collaborations
- Enabling chat between the parties to a deal
- Moderation and fraud/spam prevention
- Aggregated analytics on app usage to improve the product
We do not sell personal data to third parties.
4. Legal basis for processing
- Performance of a contract (Terms of Use) — processing of profile, trip, and collaboration data is necessary to provide the service
- Legitimate interest — basic analytics, fraud prevention
- Consent — push notifications
For users in the European Union and the United Kingdom, data processing follows the principles of the GDPR and UK GDPR. For users in Turkey, it follows the principles of KVKK. Since the app is currently administered by an individual based in Ukraine (not an EU resident), the full data controller status under GDPR will be clarified by legal counsel once a legal entity is registered in a future version.
5. Data storage
- Data is stored on Supabase servers, hosting region: EU (European Union) (default value; subject to confirmation by the technical team)
- Profile data is retained for as long as the account is active
- After account deletion, data is deleted within 30 days, except where retention is required by law
- Location data (GPS coordinates) is not stored at all — it is processed only momentarily on-device to resolve a city name
6. User rights
Regardless of country of residence, users have the right to:
- Access their data
- Correct inaccurate data
- Delete data (“right to be forgotten”)
- Restrict processing
- Data portability
- Withdraw consent at any time
Requests regarding these rights can be sent to privacy@createl.app. We respond within 30 days.
7. Third-party data processors
We use the following third-party data processors:
| Service | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication, storage, realtime chat | EU (default) |
| Expo (Push Notifications) | Push notifications | US/EU (Expo infrastructure) |
These services do not access data for their own marketing purposes — only to provide technical functionality for the app.
8. International data transfers
Since the app is available across multiple regions (Ukraine, EU, United Kingdom, Turkey, countries in Asia), user data may be processed on servers located outside the user’s country of residence (Supabase servers in the EU). We ensure that data is processed in accordance with protection standards equivalent to GDPR, regardless of the user’s country.
9. Children
The Service is not intended for individuals under the age of 18. We do not knowingly collect data from minors.
10. Changes to this policy
We may update this policy, in particular when adding paid features, registering a legal entity, or changing payment providers. We will notify users of material changes through the app or by email.
11. Contact us
- Questions about this policy: privacy@createl.app
- General support: support@createl.app